$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: x3TubrOPoHNt+X5wkodrvoy8AYB2FkmJkshuxzrX7Mo= Subject key identifier: 06:31:1D:B0:73:A4:1D:02:1C:14:71:5E:98:7F:CF:D6:0F:D0:F8:AA Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02EB Signing time: Mon 03 Nov 2025 01:36:29 +0000 Manifest this update: Mon 03 Nov 2025 01:36:28 +0000 Manifest next update: Mon 10 Nov 2025 01:36:28 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: BhOQksBW+x9FCm8gPyBTV85o6+VoAUm5b+UG+mOaKBI=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Nov 3 01:36:28 2025 GMT Not After : Nov 10 01:36:28 2025 GMT Subject: CN=6908071c-e01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:c1:00:3a:0d:47:d4:c9:b9:48:00:33:22: cf:31:f7:4d:a7:68:2c:75:c4:5f:c7:58:5b:a8:49: b2:3f:d0:d5:19:49:80:28:0a:75:eb:cd:fe:85:37: 55:5e:dd:17:24:21:c8:ba:7e:80:74:fb:b9:e9:6d: 1a:92:de:75:fc:a4:dd:b3:43:c3:2d:01:f9:f7:b4: d2:b0:48:b7:7e:00:83:46:bd:d0:9d:41:3b:88:1e: bf:ce:40:e8:c5:85:e6:5f:a7:59:8c:ba:12:c1:d4: 75:1e:c8:39:71:a7:10:fc:ed:16:f0:05:88:f8:39: d7:bd:54:1a:17:ce:7b:da:db:90:7c:ff:2e:0f:24: 23:6e:28:50:f3:c6:a9:f0:83:17:cf:7c:c6:79:9a: 6a:f3:19:1a:ca:a6:cb:72:cb:a9:5b:ca:80:5b:f3: 03:61:da:be:a8:22:e5:d4:f4:56:3a:0c:e3:4b:3e: 49:a5:43:6d:80:fc:ee:37:b3:0d:7a:cb:b9:81:92: 32:e9:d8:f0:2c:ff:76:53:4f:68:78:c9:41:ce:63: 21:71:ca:f6:dd:87:38:57:07:0c:7e:3e:2b:e1:4a: 3b:b2:eb:35:e0:e6:0a:97:ff:4a:ba:79:fb:72:1e: 47:e1:c8:4c:2c:25:4f:0e:32:46:d2:e9:d7:25:fb: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:31:1D:B0:73:A4:1D:02:1C:14:71:5E:98:7F:CF:D6:0F:D0:F8:AA X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c2:54:05:17:33:49:4a:c7:d4:dd:03:fd:11:7e:73:fb:bc: 41:72:a4:e9:43:7e:5b:37:50:a9:16:66:2b:e3:6f:b1:e2:ee: 55:46:53:a2:db:f7:fe:85:03:f3:cf:b4:e4:03:2a:8a:b6:b7: eb:9b:ce:04:76:8c:fa:9a:bb:18:e2:ef:dc:10:1f:68:cb:8b: 25:ac:11:71:88:6b:f1:27:65:c2:7f:e5:b8:7f:b2:18:4b:69: 02:64:66:5f:5a:61:23:8d:e3:40:65:d2:35:3f:3c:ed:0b:ba: 7d:53:07:c5:a5:3f:0b:84:fc:61:09:9b:a7:ed:bf:68:e4:98: ad:be:79:88:f5:75:04:f8:28:32:da:67:e9:45:1a:f0:4d:66: e2:a7:d0:81:a4:66:09:a4:49:00:8c:d4:a1:bf:d5:e2:6f:05: b8:44:15:ff:3e:65:13:94:50:17:03:43:34:9b:66:db:96:38: fc:74:c9:09:a2:ac:e6:13:3c:0d:3f:26:87:f4:04:cb:dc:33: 20:9c:fd:5f:cf:7e:38:73:0b:f9:6e:f2:30:a8:26:e4:92:98: c5:f1:58:87:87:14:fc:ea:03:44:7f:c7:b1:97:8b:eb:b9:5d: 32:cd:33:d7:7d:bc:53:34:73:61:fa:22:7d:c2:1b:0c:d6:0c: af:81:60:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUxMTAzMDEzNjI4WhcNMjUxMTEwMDEzNjI4WjAYMRYwFAYD VQQDEw02OTA4MDcxYy1lMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgXBADoNR9TJuUgAMyLPMfdNp2gsdcRfx1hbqEmyP9DVGUmAKAp1683+hTdV Xt0XJCHIun6AdPu56W0akt51/KTds0PDLQH597TSsEi3fgCDRr3QnUE7iB6/zkDo xYXmX6dZjLoSwdR1Hsg5cacQ/O0W8AWI+DnXvVQaF8572tuQfP8uDyQjbihQ88ap 8IMXz3zGeZpq8xkayqbLcsupW8qAW/MDYdq+qCLl1PRWOgzjSz5JpUNtgPzuN7MN esu5gZIy6djwLP92U09oeMlBzmMhccr23Yc4VwcMfj4r4Uo7sus14OYKl/9Kunn7 ch5H4chMLCVPDjJG0unXJftigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYxHbBz pB0CHBRxXph/z9YP0PiqMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHwlQFFzNJSsfU3QP9EX5z+7xBcqTpQ35bN1CpFmYr42+x4u5VRlOi 2/f+hQPzz7TkAyqKtrfrm84Edoz6mrsY4u/cEB9oy4slrBFxiGvxJ2XCf+W4f7IY S2kCZGZfWmEjjeNAZdI1PzztC7p9UwfFpT8LhPxhCZun7b9o5JitvnmI9XUE+Cgy 2mfpRRrwTWbip9CBpGYJpEkAjNShv9XibwW4RBX/PmUTlFAXA0M0m2bbljj8dMkJ oqzmEzwNPyaH9ATL3DMgnP1fz344cwv5bvIwqCbkkpjF8ViHhxT86gNEf8exl4vr uV0yzTPXfbxTNHNh+iJ9whsM1gyvgWBG -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:06 2025 by rpki-client